
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3230322e39312e3235322e302f32322d3232203d3e2030.roa
File: 3230322e39312e3235322e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: 6uUlNdPQp+J76BtKkcmZSkcVGqbjn0KGhdyN+vTY/gw=
Subject key identifier: 81:82:87:6C:DF:3A:8A:2B:F6:B1:9B:A2:EB:A7:B1:B6:53:A6:85:73
Certificate issuer: /CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Certificate serial: 2B785E1C4ECAF82EEEAC92800C0F346DA126DD85
Authority key identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3230322e39312e3235322e302f32322d3232203d3e2030.roa
Signing time: Thu 28 May 2026 02:08:13 +0000
ROA not before: Thu 28 May 2026 02:03:13 +0000
ROA not after: Thu 27 May 2027 02:08:13 +0000
asID: 0
IP address blocks: 202.91.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:78:5e:1c:4e:ca:f8:2e:ee:ac:92:80:0c:0f:34:6d:a1:26:dd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Validity
Not Before: May 28 02:03:13 2026 GMT
Not After : May 27 02:08:13 2027 GMT
Subject: CN=8182876CDF3A8A2BF6B19BA2EBA7B1B653A68573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:96:43:93:ff:02:a0:e1:28:39:c8:0a:05:c8:
0b:39:89:4b:f9:38:d2:95:ed:9e:95:27:e9:4e:e1:
cf:fb:22:52:56:c7:61:98:50:df:0d:da:19:5a:31:
96:79:97:8f:9e:17:fc:c5:e1:51:ab:b9:c3:ca:c4:
3b:29:37:1f:2d:3d:ec:41:28:52:28:3d:a8:27:ee:
f2:e9:a5:81:2e:3b:8a:8d:96:7a:d1:21:d9:c2:c7:
ef:35:d4:5c:e9:3b:e8:97:4a:e0:a7:75:1e:46:c8:
d5:85:79:02:1d:63:2f:35:38:54:22:be:1d:de:11:
19:d0:03:cb:47:87:e3:67:dd:8e:01:69:f6:fb:9c:
82:49:a3:7b:4e:44:69:27:a8:90:43:fa:f1:20:35:
7c:0d:2e:e3:dd:10:51:24:83:c8:f0:05:d4:b6:bc:
2f:ec:b4:e6:1d:b6:7b:bf:fa:37:3e:7c:c5:4c:e0:
64:63:e9:b3:e8:ee:e6:33:d3:37:3b:d5:82:fb:19:
63:7e:8a:94:a5:33:d6:51:62:6e:ff:fc:5c:4d:1e:
3f:81:68:8a:9b:00:6e:ec:aa:59:36:a1:a8:84:c5:
3b:9f:c4:3e:b4:58:0c:d5:fa:c1:cf:4f:9f:b1:f5:
4d:4d:c1:a7:d5:90:08:a9:66:ee:85:e4:18:ab:6b:
02:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:82:87:6C:DF:3A:8A:2B:F6:B1:9B:A2:EB:A7:B1:B6:53:A6:85:73
X509v3 Authority Key Identifier:
keyid:EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3230322e39312e3235322e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.91.252.0/22
Signature Algorithm: sha256WithRSAEncryption
55:c4:bf:6c:23:67:d4:3d:28:b7:e2:da:3a:9e:18:56:e3:28:
ac:c2:43:25:56:a4:db:d0:c5:9e:c5:39:b7:97:95:6a:a9:33:
fa:9a:05:1e:1e:ab:44:f0:8f:d5:cd:34:12:70:a1:ca:f4:7e:
a8:14:55:b0:a0:3f:13:e0:49:24:51:76:2e:42:af:38:58:22:
7e:60:9a:cd:6b:ee:05:59:ea:66:b0:3a:01:c7:03:a9:53:0a:
64:f8:da:ca:e2:bc:58:e9:b1:41:46:ef:0e:64:27:3a:c3:10:
c9:2b:4b:3d:fa:fc:9c:e0:06:51:e1:83:ca:73:fb:1f:74:b0:
a7:82:94:29:bf:80:99:c6:63:f7:65:e3:06:da:d8:ab:46:53:
ac:ab:0d:9a:bd:bc:21:64:6d:d3:ae:48:29:70:85:87:53:b9:
0d:4c:49:d3:c2:6c:5f:c6:9f:ac:d9:e6:a5:7d:a4:c2:51:f5:
d9:bf:8a:86:b8:62:e9:75:33:1d:7a:a7:dd:f4:e4:23:57:00:
f9:03:6a:89:fa:ab:ea:54:4b:45:ea:a8:f9:ad:0d:e5:d1:92:
9d:11:65:d5:d2:7b:1d:b1:6b:d8:bb:af:86:1f:66:d5:7a:41:
8b:f4:fe:3c:e0:c7:dc:59:1b:75:81:d9:b9:83:5b:19:e6:4c:
80:7e:cf:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:33 2026 by rpki-client